Just so you know, oxTrust (/identity) registration and password reset features are only intended for really small deployments. For large deployments, we recommend building your own custom pages (for example in your portal), and calling the Gluu SCIM endpoints, which require an UMA token to access.
IMHO, oxTrust is too powerful to expose to the Internet.